Skip to content
Leaked Secrets and Unlimited Miles: Hacking the Largest Airline and Hotel Rewards Platform
samcurry.net | blog | #bug-bounty | #path-traversal | #pii | #authorization-bypass | #points-com | #loyalty-programs
Summary
Flaws in points.com, backend behind many airline and hotel loyalty programs: path traversal exposed 22 million order records, and an auth bypass enabled points transfers and admin-site access.
- Published
- Collected